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WHAT IS CLAIMED IS: 

1. A user authentication device to which a user information 

processor and an authentication information processor are 

connected over a communication network, 

wherein said user information processor comprises: 
5 a function unit for sending a first authentication number 

to said authentication information processor; and 

a function unit for converting the first authentication 

number to a second authentication number using a predetermined 

conversion rule in response to an access permission notification 
10 from said authentication information processor and for using the 

second authentication number as a new first authentication number, 

and 

wherein said authentication information processor 
compr i ses : 

15 a function unit for making a check using a database in 

response to the first authentication number from said user 
information processor; 

a function unit for sending the access permission 
notification to said user information processor if a user is 

20 authenticated as valid as a result of the check; and 

a function unit for converting the first authentication 
number to a second authentication number using the same conversion 
rule after sending the access permission notification and for 
recording the second authentication number into the database as 

25 a new first authentication number. 
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2. The user authentication device as defined by claim 1, 

wherein said user information processor comprises: 
a portable recording medium; 

a function unit for readinga first authentication number 
and a predetermined conversion rule from said portable recording 
medium and for sending the first authentication number to said 
authentication information processor; and 

a function unit for converting the first authentication 
number to a second authentication number using the conversion rule 
in response to the access permission notification and for 
recording the second authentication number on said portable 
recording medium as a new first authentication number. 

3. The user authentication device as defined by claim 1, 

wherein said user information processor comprises: 
a portable recording medium; and 

a function unit for reading a first authentication number 
from said portable recording medium and for sending the first 
authentication number to said authentication information 
processor, and 

wherein said portable recording medium comprises a 
function unit for converting the first authentication number to 
a second authentication number using a predetermined conversion 
rule in response to the access permission notification and for 
recording the second authentication number on said portable 
recording medium as a new first authentication number. 

4. The user authentication device as defined by claim 1, 
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wherein said user information processor comprises: 
a portable recording medium; 

a function unit for receiving a first authentication 
5 number and sending the first authentication number to said 
authentication information processor; and 

a function unit for reading a predetermined conversion 
rule from said portable record i ng medium, for converting the first 
authentication number to a second authentication number using the 
10 conversion rule in response to the access permission notification, 
and for outputting the second authentication number as a new first 
authentication number. 

5. A user authentication device to which a user information 
processor, a mediator information processor, and an 
authentication information processor are connected over a 
communication network, 
5 wherein said user information processor comprises: 

a function unit for sending a first authentication number 
to said mediator information processor; and 

a function unit for converting a second authentication 
number to a third authentication number using a predetermined 
10 conversion rule in response to the second authentication number 
from said mediator information processor and for using the third 
authentication number as a new first authentication number, 

wherein said mediator information processor comprises: 

a function unit for sending the first authentication 
15 number to said authentication information processor, said first 
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authentication number being received from said user information 
processor; and 

a function unit for receiving the second authentication 
number from said authentication information processor and for 
sending the second authentication number to said user information 
processor, and 

wherein said authentication information processor 
compr i ses : 

a function unit for making a check using a database in 
response to the first authentication number from said mediator 
information processor and for sending the second authentication 
number to said mediator information processor if a user is 
authenticated as valid as a result of the check, the second 
authentication number being different from the first 
authentication number; and 

a function unit for converting the second authentication 
number to a third authentication number using the same conversion 
rule and for recording the third authentication number into the 
database as a new first authentication number. 
6. The user authentication device as defined by claim 5, 

wherein said user information processor comprises: 

a portable recording medium; 

a function unit for readinga first authentication number 
and a predetermined conversion rule from said portable recording 
medium and for sending the first authentication number to said 
mediator information processor; and 
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a function unit for converting the second authentication 
number to a third authentication number using the conversion rule 
10 in response to the second authentication number and for recording 
the second authentication number on said portable recordingmedium 
as a new first authentication number. 

7. The user authentication device as defined by claim 5, 

wherein said user information processor comprises: 
a portable recording medium; and 

a function unit for reading a first authentication number 
5 from said portable recording medium and for sending the first 
authentication number to said mediator information processor, and 
wherein said portable recording medium comprises a 
function unit for converting the second authentication number to 
a third authentication number using a predetermined conversion 
10 rule in response to the second authentication number and for 
recording the third authentication number on said portable 
recording medium as a new first authentication number. 

8. The user authentication device as defined by claim 5, 

wherein said user information processor comprises: 
a por tab I e record i ng med i um ; 

a function unit for receiving a first authentication 
5 number and sending the first authentication number to said 
mediator information processor; and 

a function unit for reading a predetermined conversion 
rule from said portable recording medium, for converting the 
second authentication number to a third authentication number 
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tO using the conversion rule in response to the second authentication 
number, and for outputting the third authentication number as a 
new first authentication number. 

9. A transaction system using the user authentication device as 
def i ned by claim 2, 

wherein said user information processor sends the first 
authentication number and an accounts-settlement request to said 
5 authentication information processor, 

wherein said authentication information processor 
executes the check and account-settlement processing, and 

wherein said communication network is the Internet, 

said user information processor is a terminal in a retail 

10 store, 

said authentication information processor is a credit 
card company terminal, 

said portable recording medium is a credit card, and 
said authentication number is a credit card number. 

10. A transaction system using the user authentication device 
as defined by claim 3, 

wherein said user information processor sends the first 
authentication number and an accounts-settlement request to said 
5 authentication information processor, 

wherein said authentication information processor 
executes the check and account-settlement processing, and 

wherein said communication network is the Internet, 

said user information processor is a terminal in a retail 
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10 store, 

said authentication information processor is a credit 
card company terminal, 

said portable recording medium is a credit card, and 
said authentication number is a credit card number. 

11. A transaction system using the user authentication device 
as def i ned by claim 4, 

wherein said user information processor sends the first 
authentication number and an accounts-settlement request to said 
5 authentication information processor, 

wherein said authentication information processor 
executes the check and account-settlement processing, and 

wherein said communication network is the Internet, 

said user information processor is a terminal in a retail 

10 store, 

said authentication information processor is a banking 
terminal, 

said portable recording medium is a cash card, and 
said authentication number is a personal identification 

15 number. 

12. A transaction system using the user authentication device 
as defined by claim 6, 

wherein said mediator information processor sends the 
first authentication number and an accounts-settlement request to 
5 said authentication information processor, 

wherein said authentication information processor 
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executes the check and account-settlement processing, and 
wherein said communication network is the Internet, 
said user information processor is a user terminal, 
said mediator information processor is a sales center 

term i na I, 

said authentication information processor is a credit 
card company terminal, 

said portable recording medium is a credit card, and 
said authentication number is a credit card number. 

13. A transaction system using the user authentication device 
as def i ned by claim 7, 

wherein said mediator information processor sends the 

first authentication number and an accounts-settlement request to 

said authentication information processor, 

wherein said authentication information processor 

executes the check and account-settlement processing, and 
wherein said communication network is the Internet, 
said user information processor is a user terminal, 
said mediator information processor is a sales center 

terminal, 

said authentication information processor is a credit 
card company terminal, 

said portable recording medium is a credit card, and 
said authentication number is a credit card number. 

14. A transaction system using the user authentication device 
as def i ned by claim 8, 
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wherein said mediator information processor sends the 

first authentication number and an accounts-settlement request to 

said authentication information processor, 

wherein said authentication information processor 

executes the check and account-settlement processing, and 
wherein said communication network is the Internet, 
said user information processor is a user terminal, 
said mediator information processor is a sales center 

terminal, 

said authentication information processor is a banking 
term i na I, 

said portable recording medium is a cash card, and 
said authentication number is a personal identification 

number. 

15. A user authentication method comprising the steps of; 

(a) providing a user authentication device having an 
authentication information processor to which a user information 
processor is connectable over a communication network, 

(b) receiving a first authentication number from said user 
information processor; 

(c) making a check using a database in response to the 
first authentication number from said user information processor; 

(d) sending an access permission notification to said 
user information processor if a user is authenticated as valid as 
a resu 1 1 of the check; and 

(e) converting the first authentication number to a 
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second authentication number using the same conversion rule after 

sending the access permission notification and recording the 
15 second authentication number into the database as a new first 

authentication number, and 

(f) letting said user information processor to convert the 

first authentication number to a second authentication number 

using a predetermined conversion rule in response to an access 
20 permission notification from said authentication information 

processor, and to use the second authentication number as a new 

first authentication number. 

16. The user authentication method as defined by claim 15, 

wherein said device causes said user information 
processor to perform: 

reading a first authentication number and a predetermined 
5 conversion rule from a portable recording medium and sending the 
first authentication number to said device; 

converting the first authentication number to a second 
authentication number using the conversion rule in response to the 
access permission notification; and 
10 recording the second authentication number on said 

portable recording medium as a new first authentication number. 

17. The user authentication method as defined by claim 15, 

wherein said device causes said user information 
processor to perform: 

reading a first authentication number from a portable 
5 recording medium and sending the first authentication number to 



58 



said authentication information processor, and 

wherein said device causes said portable recordingmedium 
to perform: 

converting the first authentication number to a second 
authentication number using a predetermined conversion rule in 
response to the access permission notification and 

recording the second authentication number on said 
portable recording medium as a new first authentication number. 

18. The user authentication method as defined by claim 15, 

wherein said device causes said user information 
processor to perform: 

receiving a first authentication number and sending the 
first authentication number to said authentication information 
processor; and 

reading a predetermined conversion rule from said 
portable recording medium, converting the first authentication 
number to a second authentication number using the conversion rule 
in response to the access permission notification, and outputting 
the second authentication number as a new first authentication 
number. 

19. A user authentication method comprising the steps of: 

(a) providing a user authentication device having an 
authentication information processor to which a user information 
processor and a mediator information processor are connectable 
over a communication network, 

(b) causing said user information processor to send a 
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first authentication number to said mediator information 
processor ; 

(c) causing said mediator information processor to send 
the first authentication number received from said user 
information processor to said authentication information 
processor ; 

(d) making a check by said authentication information 
processor usingadatabase in response to the first authentication 
number from said mediator information processor and sending the 
second authentication number to said mediator information 
processor if a user is authenticated as valid as a result of the 
check, the second authentication number being different from the 
first authentication number; 

(e) converting the second authentication number by said 
authentication information processor to a third authentication 
number using the same conversion rule and recording the third 
authentication number into the database as a new first 
authentication number; 

(f) causing said mediator information processor to 
receive the second authentication number from said authentication 
information processor and to send the second authentication number 
to said user information processor, and 

(g) causing said user information processor to convert 
a second authentication number to a third authentication number 
using a predetermined conversion rule in response to the second 
authentication number from said mediator information processor 
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and to use the third authentication number as a new first 
authentication number. 

20. The user authentication method as defined by claim 19, 

wherein said user information processor is caused to 

perform : 

readinga first authentication number and a predetermined 
5 conversion rule from a portable recording medium and sending the 
first authentication number to said mediator information 
processor; and 

converting the second authentication number to a third 
authentication number using the conversion rule in response to the 
10 second authentication number, and 

recording the second authentication number on said 
portable recording medium as a new first authentication number. 

21. The user authentication method as defined by claim 19, 

wherein said user information processor is caused to 

perform : 

reading a first authentication number from a portable 
5 recording medium and sending the first authentication number to 
said mediator information processor, and 

wherein said portable recording medium is caused to 
convert the second authentication number to a third authentication 
number using a predetermined conversion rule in response to the 
10 second authentication number, and to record the third 
authentication number on said portable recording medium as a new 
first authentication number. 
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22. The user authentication method as defined by claim 19, 

wherein said user information processor is caused to 

perform : 

receiving a first authentication number and sending the 
first authentication number to said mediator information 
processor; and 

reading a predetermined conversion rule from a portable 
recording medium, converting the second authentication number to 
a third authentication number using the conversion rule in 
response to the second authentication number, and outputting the 
third authentication number as a new first authentication number. 

23. A transaction method using the user authentication method 
as defined by claim 16, 

wherein said user information processor is caused to send 
the first authentication number and an accounts-settlement 
request to said authentication information processor, 

wherein said authentication information processor 
executes the check and account-settlement processing, and 

wherein said communication network is the Internet, 

said user information processor is a terminal in a retail 

store, 

said authentication information processor is a credit 
card company terminal, 

said portable recording medium is a credit card, and 
said authentication number is a credit card number. 

24. A transaction method using the user authentication method 
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as defined by claim 17, 

wherein said user information processor is caused to send 
the first authentication number and an accounts-settlement 
request to said authentication information processor, 

wherein said authentication information processor 
executes the check and account-settlement processing, and 

wherein said communication network is the Internet, 

said user information processor is a terminal in a retail 

store, 

said authentication information processor is a credit 
card company terminal, 

said portable recording medium is a credit card, and 

said authentication number is a credit card number. 
25. A transaction method using the user authentication method 
as def i ned by claim 18, 

wherein said user information processor is caused to send 
the first authentication number and an accounts-settlement 
request to said authentication information processor, 

wherein said authentication information processor 
executes the check and account-settlement processing, and 

wherein said communication network is the Internet, 

said user information processor is a terminal in a retail 

store, 

said authentication information processor is a credit 
card company terminal, 

said portable recording medium is a cash card, and 
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said authentication number is a personal identification 

number. 

26. A transaction method using the user authentication method 
as def i ned by claim 20, 

wherein said mediator information processor is caused to 
send the first authentication number and an accounts-settlement 
request to said authentication information processor, 

wherein said authentication information processor 
executes the check and account-settlement processing, and 
wherein said communication network is the Internet, 
said user information processor is a user terminal, 
said mediator information processor is a sales center 
te rm i na I , 

said authentication information processor is a credit 
card company terminal, 

said portable recording medium is a credit card, and 
said authentication number is a credit card number. 

27. A transaction method using the user authentication method 
as defined by claim 21, 

wherein said mediator information processor is caused to 
send the first authentication number and an accounts-settlement 
request to said authentication information processor, 

wherein said authentication information processor 
executes the check and account-settlement processing, and 

wherein said communication network is the Internet, 

said user information processor is a user terminal, 
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said mediator information processor is a sales center 
terminal, 

said authentication information processor is a credit 

card company terminal, 

said portable recording medium is a credit card, and 
said authentication number is a credit card number. 

28. A transaction method using the user authentication device 

as defined by claim 22, 

wherein said mediator information processor is caused to 

send the first authentication number and an accounts-settlement 

request to said authentication information processor, 

wherein said authentication information processor 

executes the check and account-settlement processing, and 
wherein said communication network is the Internet, 
said user information processor is a user terminal, 
said mediator information processor is a sales center 

terminal, 

said authentication information processor is a banking 
terminal, 

said portable recording medium is a cash card, and 
said authentication number is a personal identification 

number. 



